A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVE-2024-0582
CVSS base score
7.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-416
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
linux linux kernel
References
- access.redhat.com Third Party Advisory
- bugs.chromium.org Issue Tracking, Mailing List
- bugzilla.redhat.com Issue Tracking, Patch, Third Party Advisory
- git.kernel.org Mailing List, Patch
- www.openwall.com
- access.redhat.com Third Party Advisory
- bugs.chromium.org Issue Tracking, Mailing List
- bugzilla.redhat.com Issue Tracking, Patch, Third Party Advisory
- git.kernel.org Mailing List, Patch